Skip to content
Calcrivo

Business Continuity Calculator

Score a business continuity programme on plan coverage, exercising, achievable recovery against the MTPD, alternate capacity and supplier contingency.

Inputs

processes
processes
processes
hours
hours
%
%
%

Continuity Programme Score

54.1%

Plan Coverage

79.2%

Exercise Coverage

50.0%

Recovery Gap Against the MTPD

12.0hours

Critical Processes Not Exercised

12processes

Programme Maturity

Level 2 — documented but unproven

Recovery Verdict

Demonstrated recovery is 12 hour(s) beyond the maximum tolerable period of disruption, so the plan does not meet its own requirement

Next Action

Close the recovery gap first — an RTO the organisation cannot demonstrate is the single largest continuity exposure

Step by step

  1. Values used

    Critical business processes = 24 processes; Processes with a current documented plan = 19 processes; Processes exercised in the last 12 months = 12 processes; Shortest maximum tolerable period of disruption = 24 hours; Recovery time you can actually demonstrate = 36 hours; Alternate site or region capacity = 60 %; Key roles with a trained deputy = 45 %; Critical suppliers with a contingency arrangement = 50 %; Most demanding exercise completed = Functional or simulation exercise — 75

  2. Business Continuity

    Programme score = 0.25 × recovery capability + 0.20 × plan coverage + 0.20 × exercise coverage + 0.12 × alternate capacity + 0.10 × supplier contingency + 0.08 × cross-training + 0.05 × exercise depth.

  3. Continuity Programme Score

    = 54.1

  4. Plan Coverage

    = 79.2

  5. Exercise Coverage

    = 50.0

  6. Recovery Gap Against the MTPD

    = 12.0 hours

  7. Critical Processes Not Exercised

    = 12 processes

  8. Programme Maturity

    = Level 2 — documented but unproven

How it works

Recovery capability carries the largest weight and is measured against the MTPD rather than against the RTO in the policy, because the tolerable period is a business constraint while the objective is an aspiration. Exercise coverage is weighted equally with plan coverage on the simple grounds that an unexercised plan has never been shown to work, and cross-training appears because continuity plans routinely name one person who is on holiday. Continuity programmes look healthy on a plan count and fail on the two things nobody measures: whether recovery has ever been demonstrated, and whether anyone other than the author can execute the plan. These are management estimates for programme steering, not an ISO 22301 audit result.

Formula

Business Continuity

Programme score = 0.25 × recovery capability + 0.20 × plan coverage + 0.20 × exercise coverage + 0.12 × alternate capacity + 0.10 × supplier contingency + 0.08 × cross-training + 0.05 × exercise depth.

recovery capability
Demonstrated recovery time compared with the MTPD: 100 at half the MTPD, 75 inside it, 35 up to twice it, 0 beyond
plan coverage
Processes with a current plan ÷ critical processes
exercise coverage
Processes exercised in 12 months ÷ critical processes

Frequently Asked Questions

How is Business Continuity calculated?

Programme score = 0.25 × recovery capability + 0.20 × plan coverage + 0.20 × exercise coverage + 0.12 × alternate capacity + 0.10 × supplier contingency + 0.08 × cross-training + 0.05 × exercise depth. Recovery capability carries the largest weight and is measured against the MTPD rather than against the RTO in the policy, because the tolerable period is a business constraint while the objective is an aspiration. Exercise coverage is weighted equally with plan coverage on the simple grounds that an unexercised plan has never been shown to work, and cross-training appears because continuity plans routinely name one person who is on holiday.

Why does Business Continuity matter?

Continuity programmes look healthy on a plan count and fail on the two things nobody measures: whether recovery has ever been demonstrated, and whether anyone other than the author can execute the plan. These are management estimates for programme steering, not an ISO 22301 audit result.

What values do I need to enter?

This calculator takes 9 inputs: Critical business processes, Processes with a current documented plan, Processes exercised in the last 12 months, Shortest maximum tolerable period of disruption, Recovery time you can actually demonstrate, Alternate site or region capacity, Key roles with a trained deputy, Critical suppliers with a contingency arrangement, Most demanding exercise completed. The pre-filled defaults are a realistic starting point — replace them with figures from your own environment for a result you can act on.

Why measure against the MTPD rather than the RTO?

Because the RTO is a target you chose and the MTPD is a limit the business imposes. If demonstrated recovery beats the RTO but breaches the MTPD, the RTO was set wrong; if it beats the MTPD but misses the RTO, you have a tuning problem rather than a survival problem.

Is a tabletop exercise good enough?

It is far better than nothing and it is where most gaps in decision-making and communication surface cheaply. What it cannot tell you is whether the technical recovery works, which is why exercise depth is scored separately and a live failover scores highest.

You might also need